Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: qsPz4ximSLe7z62SkrFJMLiwFlOLWtX2uhChyQt7C8Q=
Subject key identifier: 9F:94:85:A2:27:73:22:48:8D:05:67:BD:9A:1C:63:0B:E2:97:4B:81
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 01963FF9418B19422460EBA67ED3DD031FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 19:00:21 +0000
Manifest this update: Wed 16 Apr 2025 19:00:21 +0000
Manifest next update: Thu 17 Apr 2025 19:00:21 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: X4F1LuSYlkHQw5umlj93eIhk7NXYbNnkMF0c/4qqtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:41:8b:19:42:24:60:eb:a6:7e:d3:dd:03:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Apr 16 19:00:21 2025 GMT
Not After : Apr 17 19:00:21 2025 GMT
Subject: CN=9f9485a2277322488d0567bd9a1c630be2974b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:7e:50:0a:5d:01:13:32:2c:7c:df:e4:63:
12:38:54:5a:05:73:6d:48:f6:d4:78:60:1e:e6:bc:
81:98:8a:1b:46:a6:51:d2:f3:ae:04:f7:de:8c:1b:
b7:4a:4b:aa:29:45:71:2f:94:1f:48:79:17:79:a1:
a3:fc:e7:cb:8e:bf:dd:8c:f3:8e:10:59:eb:aa:c3:
bf:d2:86:41:95:55:66:9a:f6:72:de:45:40:e8:ff:
0e:2f:ed:e7:df:f2:12:68:af:f3:96:0c:aa:18:0e:
b8:d4:84:00:e6:05:15:ff:d4:43:2b:be:24:59:9f:
cd:6a:8c:05:c1:41:1f:d2:2f:33:f0:ab:6b:6c:64:
b0:e3:60:88:5c:e4:2c:9d:30:eb:f2:32:9a:dc:d0:
de:6a:e9:02:bc:75:e2:dd:3e:3c:8f:8e:7f:3b:6c:
42:cf:83:d3:93:5f:7a:32:41:dd:a7:e3:f1:9b:dc:
d4:52:c8:14:56:73:1d:1b:1e:dd:26:1f:ef:4b:dc:
14:95:ca:ca:6e:3d:29:8b:9a:fd:b0:f5:d7:5b:bd:
58:9b:a5:2c:79:44:40:e5:a6:3d:65:09:21:bb:95:
0f:ce:66:79:25:c5:7d:98:06:2e:a4:55:dd:13:8c:
dd:73:db:98:76:f7:9c:25:e9:db:bd:3e:72:fe:b8:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:85:A2:27:73:22:48:8D:05:67:BD:9A:1C:63:0B:E2:97:4B:81
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:e7:32:4f:ad:d5:8c:51:e1:8e:65:fe:82:5b:ff:7c:c1:
ae:5f:cc:4b:56:24:9c:62:3e:0f:c5:82:9f:7b:3f:b6:81:aa:
98:39:85:9d:5c:85:ad:c4:06:db:07:11:18:c4:3d:6f:09:0a:
ae:7b:e4:cf:ed:c6:e4:14:ee:1b:45:e6:80:c6:4b:8d:f7:42:
31:bd:db:ba:8d:3c:1a:7c:48:a9:9e:72:4e:db:6a:94:72:75:
bf:8f:fc:54:1f:ea:57:60:3c:b9:95:ac:af:46:e4:f0:ac:b5:
a3:f7:8c:26:32:35:63:07:f5:57:06:9b:e5:10:ee:55:52:fc:
06:5b:4d:fd:8f:ac:35:57:34:67:28:40:ef:c0:d2:be:70:c9:
8d:f6:8e:52:fa:10:c9:51:72:29:61:b1:5d:0a:b7:85:63:bd:
1c:25:1f:f3:62:2e:ed:ee:0e:2b:fc:20:4d:f1:aa:c8:a3:8f:
ab:b3:21:51:1b:ba:2e:f5:a2:0a:1e:7f:de:38:24:ee:f8:b0:
c3:40:d5:f7:cd:e0:89:61:05:db:02:31:52:6b:d7:2c:92:3b:
c0:57:d6:bc:e1:fa:c9:2c:87:6e:60:3e:bc:b5:7f:c4:24:2f:
4f:1a:98:45:84:22:46:56:15:e0:f9:3a:57:c8:bf:bc:c8:5f:
b4:61:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:27 2025 by rpki-client